How to minimize the risk
The risks can be prevented with a holistic cyber security strategy. First and foremost, intrusion and detection systems (IDS / IPS), which can be operated in the company’s own IT or also used by service providers, protect against AI-based attacks. These systems detect data streams in the network that differ from normal operation and generate an alarm message in the system.
A much more precise solution for the detection of anomalies is the introduction or use of a Security Operation Centre, or SOC for short. The SOC has the task of monitoring and analyzing threat states and, if possible, initiating countermeasures.
The use of a SIEM or SOAR solution also helps to detect and defend against attacks. A SIEM is a system that detects anomalies and triggers an alarm but requires a manual response. This is in contrast to SOAR, which also receives alerts but responds automatically to prevent the threat.
It is also crucial to implement effective preventive measures. Other strategies that companies can use to detect attacks include specific training aimed at “business email compromise”, for example. Companies should therefore develop comprehensive, regular and up-to-date training programmes that target AI-based BECs. As an ongoing part of professional development, these trainings should highlight the methods and approaches of cybercriminals to better understand the tactics of attackers.
Sources and Inspiration
https://www.golem.de/news/chatbot-fuer-cyberkriminelle-wormgpt-generiert-aeusserst-ueberzeugende-phishing-mails-2307-175894.html (Status 29.08.2023)
https://slashnext.com/blog/wormgpt-the-generative-ai-tool-cybercriminals-are-using-to-launch-business-email-compromise-attacks/ (Status 29.08.2023)
